Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: eJCF6jmI6W2ln792dZjaylgxT3n7SDBJcoqNwh6xJGo=
Subject key identifier: 6F:59:60:F7:AC:67:4D:95:33:DE:A2:E2:A8:BE:45:0D:62:0C:10:00
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019D9CD124B25BA1D13138235FEEA732B5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0D1B
Signing time: Fri 17 Apr 2026 19:00:45 +0000
Manifest this update: Fri 17 Apr 2026 19:00:45 +0000
Manifest next update: Sat 18 Apr 2026 19:00:45 +0000
Files and hashes: 1: 1-pZ-LCxKwG1Hr4KnbmHCrK_vxKA.roa (hash: NNYlHfIxan1j/0zIjX+X1sunYONMC/0x7QAxXByYowU=)
2: Besyfcp0ocXXZR4bgBvGDpNq_18.roa (hash: urkG1FiIsn6s09W2B2I+KU16rioSe6pO4WMymlPytjA=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: ot8ahf5/Sl+DwmEWwuExPStZfj0POBDEfu12i7XyE/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:24:b2:5b:a1:d1:31:38:23:5f:ee:a7:32:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Apr 17 19:00:45 2026 GMT
Not After : Apr 18 19:00:45 2026 GMT
Subject: CN=6f5960f7ac674d9533dea2e2a8be450d620c1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:31:3f:f9:10:0f:6d:d1:84:d2:b4:d9:9b:
82:70:84:a9:73:53:3b:30:e8:72:73:a5:0e:3d:a1:
d1:78:9a:6d:1d:7a:b5:7e:76:5c:6e:2b:cc:fc:a9:
d4:a4:ee:70:68:6c:38:91:9d:d4:82:8e:34:2a:2e:
b5:c8:da:45:76:20:95:3d:5a:b3:c8:59:46:1a:42:
fb:d8:43:9d:92:fd:7b:9c:82:51:91:d5:ed:74:00:
23:9b:86:e3:14:db:58:45:c2:c8:de:d5:38:fb:12:
69:6b:c1:54:4d:f7:7b:09:79:33:18:bd:21:fa:f2:
a2:5e:ca:88:71:38:db:30:ed:72:68:31:6b:10:d4:
d4:32:a6:c1:68:ad:8f:ab:21:6f:39:38:15:65:25:
b6:40:ec:20:e0:51:0d:a0:f0:0b:4d:02:ed:25:94:
7c:40:f7:39:5a:b4:62:cb:f9:f8:9b:e3:14:42:bf:
56:83:6d:5f:16:41:96:e3:c0:ad:3e:00:88:f8:ce:
b1:a9:71:11:bd:96:36:ab:6f:77:6e:c1:fe:01:36:
6b:fa:40:5a:8d:2b:fe:70:a7:f2:0b:86:a0:de:42:
34:24:6e:83:26:c4:01:e7:fa:7f:03:dd:85:68:05:
bb:a5:fc:a0:ee:87:7a:95:3a:b3:64:22:b1:7e:5a:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:59:60:F7:AC:67:4D:95:33:DE:A2:E2:A8:BE:45:0D:62:0C:10:00
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:b9:0e:7b:24:f3:02:14:d2:f4:c5:29:d5:c2:52:47:a2:
ba:a9:8e:05:c6:bd:db:6e:41:d8:af:6f:ad:9d:08:f7:7c:26:
f3:dd:5b:ef:4d:de:51:82:98:cc:97:a8:a5:7d:d9:25:0e:c9:
e0:05:05:7c:37:83:e6:9f:a8:30:24:19:3f:3e:78:cd:94:d3:
58:6c:37:67:59:a0:66:a7:32:99:60:7c:01:83:32:74:3b:64:
f1:7e:93:6d:38:e8:a4:53:73:6c:a0:7e:73:e0:ab:8f:78:a5:
c8:16:a5:f2:8d:70:54:e9:d9:43:da:52:24:ae:c0:76:ed:65:
07:cb:c3:99:1f:6c:06:0c:94:87:16:4f:54:4c:1a:41:73:a3:
8a:3a:88:35:17:4a:f2:4e:f3:22:a5:59:07:6b:42:8e:e6:21:
e7:fb:85:35:02:51:de:27:9f:3a:6e:17:f7:9e:c9:99:a7:55:
41:3a:fc:e7:b5:8b:b2:b1:8f:b9:db:cf:c3:23:23:9b:3d:a4:
5b:d9:c5:8a:ea:51:a3:75:dc:09:f9:46:a1:f6:04:8b:e5:2d:
dc:a2:2c:57:3a:12:4b:03:63:ea:5c:24:9c:8e:09:67:92:49:
a4:9d:a5:2f:63:b8:1f:42:6c:fb:68:58:8a:15:66:51:90:70:
d1:a1:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:50 2026 by rpki-client